General

  • Target

    c178ee2257a4a5b5d6d2498aca5b9cfd5c72c590965fbab45528e1cb002c8218N.exe

  • Size

    391KB

  • Sample

    241115-tx8k5sxflr

  • MD5

    a5ba806d6e42f5e7e3947a0c36b76730

  • SHA1

    520d379ca0aadff1431583fd3c107b73cc4a01bd

  • SHA256

    c178ee2257a4a5b5d6d2498aca5b9cfd5c72c590965fbab45528e1cb002c8218

  • SHA512

    ae75c7c8ddebbc93dddbe69c98d27813c2d790be5e121c02ad26bd4843d9270383779843ff0979f337955f3f58f194f148c05f9ad3fce04934cad58cd42e8541

  • SSDEEP

    6144:5OLLQdlhAjJzhx7BDmK/vsQXRnl64VygWksxj3iL/U4qL:5OLkdlhAjJFD3vDBUSWkUyvqL

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      c178ee2257a4a5b5d6d2498aca5b9cfd5c72c590965fbab45528e1cb002c8218N.exe

    • Size

      391KB

    • MD5

      a5ba806d6e42f5e7e3947a0c36b76730

    • SHA1

      520d379ca0aadff1431583fd3c107b73cc4a01bd

    • SHA256

      c178ee2257a4a5b5d6d2498aca5b9cfd5c72c590965fbab45528e1cb002c8218

    • SHA512

      ae75c7c8ddebbc93dddbe69c98d27813c2d790be5e121c02ad26bd4843d9270383779843ff0979f337955f3f58f194f148c05f9ad3fce04934cad58cd42e8541

    • SSDEEP

      6144:5OLLQdlhAjJzhx7BDmK/vsQXRnl64VygWksxj3iL/U4qL:5OLkdlhAjJFD3vDBUSWkUyvqL

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks